Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/151c3e-95d8-483b-8dc2-998ad50f4a2a/1/OEzdzXTQQilYPSwr7tBz4AlrozU.mft
File: OEzdzXTQQilYPSwr7tBz4AlrozU.mft (raw, json)
Hash identifier: Xz5FGjgurDZBWBH1RIdtdXj+FLUxCaERZLYLAZMZmaQ=
Subject key identifier: FC:86:DB:75:0A:E2:8C:F1:6B:E6:ED:E1:4D:FF:FC:5C:33:21:08:91
Authority key identifier: 38:4C:DD:CD:74:D0:42:29:58:3D:2C:2B:EE:D0:73:E0:09:6B:A3:35
Certificate issuer: /CN=384cddcd74d04229583d2c2beed073e0096ba335
Certificate serial: 0196BF6EF4CDD33A46DDEE8DF198226F42D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEzdzXTQQilYPSwr7tBz4AlrozU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/151c3e-95d8-483b-8dc2-998ad50f4a2a/1/OEzdzXTQQilYPSwr7tBz4AlrozU.mft
Manifest number: 0587
Signing time: Sun 11 May 2025 13:00:41 +0000
Manifest this update: Sun 11 May 2025 13:00:41 +0000
Manifest next update: Mon 12 May 2025 13:00:41 +0000
Files and hashes: 1: OEzdzXTQQilYPSwr7tBz4AlrozU.crl (hash: rFLBatxUGNcDYPETsS+EnVc8wio0tfK/b2ioF4wIXxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/151c3e-95d8-483b-8dc2-998ad50f4a2a/1/OEzdzXTQQilYPSwr7tBz4AlrozU.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/151c3e-95d8-483b-8dc2-998ad50f4a2a/1/OEzdzXTQQilYPSwr7tBz4AlrozU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OEzdzXTQQilYPSwr7tBz4AlrozU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 13:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6e:f4:cd:d3:3a:46:dd:ee:8d:f1:98:22:6f:42:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=384cddcd74d04229583d2c2beed073e0096ba335
Validity
Not Before: May 11 13:00:41 2025 GMT
Not After : May 12 13:00:41 2025 GMT
Subject: CN=fc86db750ae28cf16be6ede14dfffc5c33210891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:79:af:af:2a:13:2c:70:c3:3c:23:0d:ab:64:
87:96:8e:ab:8a:c6:6f:51:d2:d0:c3:25:38:16:10:
e3:12:ea:a3:c3:18:7d:ca:58:0d:0c:d4:83:68:3c:
a4:36:f5:d3:b1:ab:e9:45:71:48:5a:f9:ef:84:ac:
9a:6d:0f:b5:91:81:df:e0:f4:98:8f:07:96:a3:e8:
fe:e7:56:08:55:3f:8e:9c:de:45:6c:a7:da:55:c3:
9e:85:c2:56:59:ae:2d:d8:db:12:f0:bd:8f:83:9a:
76:2b:da:29:56:27:05:d9:3b:09:af:12:9a:14:ef:
48:16:c1:96:7d:d0:31:77:d8:be:e3:3a:ff:94:31:
73:70:f2:c2:d6:b2:53:7e:aa:b8:c9:c9:fb:c4:84:
50:7a:93:aa:65:82:7a:03:56:a6:a8:ff:5b:a6:26:
de:84:3a:17:2b:e6:e8:0a:95:ef:bb:94:6c:30:57:
2e:f1:ef:ef:79:65:6e:bb:f1:fc:bd:30:eb:dc:03:
6f:3e:a5:a7:0e:72:60:c7:93:7d:ad:62:ab:c9:40:
d8:a8:07:fc:68:c3:47:74:e4:8e:f1:93:9e:9d:3b:
68:ec:0a:45:3c:4f:1b:81:60:d7:a0:e3:04:5f:17:
62:80:dd:37:0d:1d:8c:c9:1b:ba:48:92:78:59:4c:
ff:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:86:DB:75:0A:E2:8C:F1:6B:E6:ED:E1:4D:FF:FC:5C:33:21:08:91
X509v3 Authority Key Identifier:
keyid:38:4C:DD:CD:74:D0:42:29:58:3D:2C:2B:EE:D0:73:E0:09:6B:A3:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEzdzXTQQilYPSwr7tBz4AlrozU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/151c3e-95d8-483b-8dc2-998ad50f4a2a/1/OEzdzXTQQilYPSwr7tBz4AlrozU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/151c3e-95d8-483b-8dc2-998ad50f4a2a/1/OEzdzXTQQilYPSwr7tBz4AlrozU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:74:fd:b7:60:a4:30:75:f2:11:8a:bd:1f:35:10:0f:97:33:
20:e3:7a:9b:83:a5:16:bf:90:6c:1a:33:27:1c:6e:32:64:43:
13:e8:18:d6:16:e8:da:f7:59:70:4e:d0:35:db:d1:04:5a:60:
e1:74:a2:f5:f6:d1:a1:e7:1d:c8:d8:3b:5a:d6:c4:29:f3:f1:
20:e7:6f:80:e5:dd:1e:a0:b3:fe:c4:cb:ff:29:89:31:f8:d9:
a2:4e:11:e0:62:9b:9e:82:47:84:d0:e6:6d:b4:16:f4:a3:df:
87:a3:10:54:5d:46:fb:21:22:6e:c2:6e:ab:61:64:c1:d5:28:
f3:d3:29:30:72:f6:b4:e4:9d:79:2e:9e:69:26:c5:15:1f:94:
4c:5b:71:7d:ef:d8:69:45:14:32:58:30:4f:8e:15:fa:c4:0d:
f3:1f:46:81:21:49:f7:d0:86:2d:b0:e4:fc:1c:50:d8:82:7e:
92:3b:a7:c1:c7:d8:e9:c3:fe:7b:74:00:ce:97:9f:38:da:3c:
f3:4b:21:3f:7d:1c:ba:c3:44:5d:b6:fe:5e:80:00:4d:35:be:
1c:54:df:bb:5f:25:89:66:f5:f8:70:31:1b:9c:32:41:05:ac:
46:07:10:40:0a:3c:13:3a:0f:3d:f5:05:1c:e7:cf:53:db:a3:
4b:5e:92:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:09:05 2025 by rpki-client